Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in github.com/bishopfox/sliver

Description

References

• BishopFox/sliver security advisory · ADVISORY
• BishopFox/sliver commit 0cf5a47 · WEB
• BishopFox/sliver release v1.7.2 · WEB

More vulnerabilities in github.com/bishopfox/sliver

• CVE-2026-77622Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder in github.com/bishopfox/sliver
• GO-2026-4899Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopf…
• CVE-2026-34227HIGH 8.8Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link …
• GHSA-c279-989m-238fHIGHSliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
• CVE-2026-32941MEDIUM 6.5Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memor…